CVE-2017-7735

2017-09-1100:00:00

fortinet

www.cve.org

0.001 Low

EPSS

Percentile

39.5%

JSON

A Cross-Site Scripting vulnerability in Fortinet FortiOS versions 5.2.0 through 5.2.11 and 5.4.0 through 5.4.4 allows attackers to execute unauthorized code or commands via the “Groups” input while creating or editing User Groups.

CNA Affected

[
  {
    "product": "Fortinet FortiOS",
    "vendor": "Fortinet, Inc.",
    "versions": [
      {
        "status": "affected",
        "version": "FortiOS versions 5.2.0 through 5.2.11, and 5.4.0 through 5.4.4"
      }
    ]
  }
]